December 2003 - cypherpunks-legacy

One-time pads
by nobody＠replay.com 17 Dec '03

17 Dec '03

The arrival of warm weather is heralded by the pig shit (or whatever kind of shit Intel swines have for brains) getting soft in Timmy C[rook] Mayhem's mini-cranium and the resulting green slime seeping through his cocaine- and syphilis- damaged nose and onto his keyboard. o_, o <\__, v|> Timmy C[rook] Mayhem | < \

1 0

Re: premail.
by ichudov＠algebra.com 17 Dec '03

17 Dec '03

Anonymous wrote: > > A scenario: > > 1) The spooks put a bug (named Eve) on the link between > kiwi.cs.berkeley.edu and the Internet. > > Whenever kiwi.cs.berkeley.edu sents out the pubring.pgp Eve intercepts > it and replaces it with a file of the spooks' choosing. This file will > selectively replace the public pgp keys of some of the remailers (say exon) > in pubring.pgp with keys to which the spooks know the private key. > > 2) A similar bug is put on the link between the exon remailer and the > internet. All email to exon is intercepted, and if found to be encrypted > with the spooks' PGP key, it is decrypted, saved, re-encrypted with exon's > real PGP key and sent on. > > It is only a scenario. I am still using premail to send this. > A good scenario. A truly paranoid premail users should verify who signed the remailer keys. If you trust the signators and they signed the keys, you are "safe". Just do pgp -kvv some(a)remailer.com and see what comes up. Maybe remailer operators should asks someone reputable to sign their remailers' keys so that the users can easily verify the signatures. - Igor.

4 4

How to Reach The Most People
by iolkos＠ix.netcom.com 17 Dec '03

17 Dec '03

Targeted E-Mail Lists Will Get Your Message Out You probably have a special offer to make to many people over the internet. At ATS Publishers, Inc., we maintain a database of over 450 groups of e-mail addresses sorted according to the groups' demographic, psychographic, geographic, benefits-sought, and individual description. If you have a book, product, announcement, or service to advertise in a specific area, your greatest response rates will come from targeting these niche lists. You must have these addresses, as you will save money while no longer mailing your sales message to unqualified prospects. We absolutely guarantee your success with these lists. Here is a small sample: Opportunity Seekers, General Business, Sports (all), Entrepreneurship, Fitness & Exercise, Accountants, Health, Lawyers & Legal, Nutrition, Single Moms, Fashion, Outdoors, Dresswear, Computers, Math & Sciences (all), Finance, Investing, Fishing, Hunting, Hunting Dogs, Financial Markets, Race Boats, Wealth, Taxes, Languages, Millionaires, Divorced Parents, Gay & Lesbian, Kids, Teenagers, Adults, Seniors, Racial-Ethnic-Cultural (all), Criminal, Pornography, Shopaholics, Alcoholics, Virgins, Politics, Overweight, Paranormal, Psychology, Literature, Technical, Painters & Artists, Doctors & Medicine, Religion & Atheism, Government, Taxation, Food and Beverages, Wines & Spirits, Restaurants, Working Women, Geographical U.S., Sex, Physically Challenged Persons, Drugs, Hippies, Music and Musicians, Firearms, Militias, Students, AIDS, Disorders, Child & Baby Care, Feminists, Body Painting & Piercing, Massage, Activists, Homeowners, Real Estate, Automotive, Health Care, Insurance, Edu! cation, Infertility, Architects, Dating, Love, Telecommunications, Hardware & Tools, Homes & Gardening, S&M, Housekeeping, Spirits & Wines, Home Business, Star Trekkies, Athletes, Authors, Store Owners, Job Hunters, Photography, Plants, and another 350 groups targeted even further... If you do not see your group in these listings, don't worry! Even if they are not in our database, we will create one for you within 24 hours. Here's how to order: Write us a brief description of the groups you want to target. We will then ship you, in diskette form, a listing of the 10,000 most targeted prospects for your product. These are people who have PROVEN beyond any doubt that they are interested in the service you are offering. Each e-mail listing of 10,000 names costs only $19.95. And although $19.95 is our minimum order, you may buy in odd lots also, say, 15,000. Each additional name after 10,000 costs only 1/10th of a cent; in this 15,000 name case, you would pay only $24.95! For 20,000 names,you would pay $19.95 plus an extra $10 (10,000 X 10 cents) All orders are shipped via 2-3 day priority mail, and come with a 30-day No Questions Asked Money Back Guarantee. Mail your check or M.O., in the amount of $19.95 plus any additional charges, along with your groups' description, to: ATS Publishers, Inc. 3811 Ditmars Blvd. Astoria, NY 11105 Tel: (718) 274-9060 If the line is busy, keep trying! We're trying to keep up with the enormous demand, since Thursday the 26th, our first mailing. Thank you so much for your time.

1 0

E-Cash IPO! PCweek Mag!
by Robert Hettinga 17 Dec '03

17 Dec '03

I'm sure they'll be hearing from Digicash, BV's trademark folks on this one... Cheers, Bob Hettinga --- begin forwarded text From: latham(a)softcell.net To: Date: Thu, 02 Jan 1997 02:11:04 PST Subject: E-Cash IPO! PCweek Mag! E-Cash IPO! 625,000 shares - $1.60 per share As seen in PCweek online magazine: http://www.pcweek.com/news/0826/27email.html "E-commerce startup offers digital cash to each user who retrieves advertising e-mail from its web site. Digital currency units can be converted into US dollars, Japanese yen, Swiss francs, and German marks." Millennium Interactive Technologies, developer of the first ever system of advertiser funded digital cash system. (DCU) is offering 625,000 common shares directly to the public. The offering price is $1.60 per share. Qualified investors can obtain a printed copy of the offering prospectus, demo disk, and additional info on how you can earn digital cash for looking at e-mail by sending reply to: mailto:latham@softcell.net --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox, e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/ FC97: Anguilla, anyone? http://offshore.com.ai/fc97/

1 0

Re: Hardening lists against spam attacks
by camcc＠abraxis.com 17 Dec '03

17 Dec '03

At 09:28 AM 12/31/96 -0800, you wrote: : :So in order to post here, I hafta install and run PGP? Well, people :were looking for the perfect formula to deny service to guys like me, :and guess what? You found it! I will *not* install and run PGP. Fill me in. Why do you choose not to install and run PGP? Cordially, Alec PGP Fingerprint: Type bits/keyID Date User ID pub 1024/41207EE5 1996/04/08 Alec McCrackin <camcc(a)abraxis.com> Key fingerprint = 09 13 E1 CB B3 0C 88 D9 D7 D4 10 F0 06 7D DF 31

2 1

Re: Would you be interested in SPAM?
by camcc＠abraxis.com 17 Dec '03

17 Dec '03

At 12:51 AM 1/1/97 GMT, you wrote: To cypherpunks(a)toad.com :You can save a substantial amount of money on your next Florida :Vacation and receive an adult pass to Universal Studios. : No adults here, Spamboy.

1 0

Copyright violations
by alzheimer＠juno.com 17 Dec '03

17 Dec '03

Happy New Year. Associated Press: Monday, December 23, 1996 Three Credit Card Firms Seek To Promote Internet Shopping Three credit card companies on Monday announced an agreement on chip card standards in an effort to promote shopping on the Internet. Europay International, MasterCard International and Visa International said in a statement that they'll integrate in chip bank cards a technology developed for safe electronic payments. The agreement is based on the Europay-MasterCard-Visa specification, which established the financial industry's first global chip card payment infrastructure, and on MasterCard and Visa's Secure Electronic Transactions specification for magnetic stripe-based card transactions. Guido Heyns, director of 'smart card' development at Europay International, said in the statement that the Belgium-based company believes chip cards are the most secure and consumer-friendly solution for making payments on the Internet. Steve Mott, senior vice president of MasterCard International, agreed. 'Consumers and merchants want to conduct transactions over the Internet in a safe manner. By integrating chip and electronic commerce technologies, we are offering them the opportunity to do so as quickly and practically as possible.' An open comment period on the new standard will begin in the third quarter of 1997, according to the statement. American Banker: Monday, December 23, 1996 As the Technology Advances, Security Debate Still Rages By JEFFREY KUTLER In one of the more startling public statements by a banker in 1996, Citicorp chairman John Reed said it would take two generations -- 50 to 70 years -- for on-line electronic banking to gain full public acceptance. Taken out of context, his remarks to a Treasury Department conference on electronic money sounded like an invitation to complacency, or a dose of disinformation from one of the world's more aggressive purveyors of electronic financial services. But Mr. Reed chose his words carefully, citing a lesson learned from his 30-plus years at Citicorp: Banking markets, and society generally, take time to change. He seemed to suggest that high-technology advocates can become so enthralled with the elegance of their systems and convinced of their viability that they overlook the most common of all constraints: consumer behavior. "Privacy and security are at the top of the list" of consumers' concerns, the Citicorp chief executive said. "They won't deal with anyone who doesn't give them assurance." While "some early innovators will be your electronic banking customers," he said, "the average consumer is not there yet and isn't going to be there" for some time. "This is not a question of economics or efficiency. It is a question of trust. The consumer will have to trust you. The Internet is fundamentally flawed in that regard." Essentially alone among the major U.S. banking organizations, Citicorp has been openly wary of Internet security and refrained from joining the rush to interactive banking and monetary transactions via the World Wide Web. Mr. Reed and his senior technology officer, Colin Crook, have publicly expressed interest in and enthusiasm for the Web but not yet for transactional purposes. When Mr. Reed was asked during the Treasury conference in September when Citi would offer Internet banking, he replied, "Not until it's secure." "There is no absolute security," said Mr. Crook, perhaps the only banker raising concerns about an "information warfare" attack on the banking system. "It is a risk management issue." The Citibankers contend the risks of cyberspace are fundamentally different from those in other payment systems, and have yet to be addressed. "Security will be more demanding than even the government itself is used to," Mr. Crook said at the Treasury meeting serves more customers via personal computer than any other, through conventional dial-up connections and with software it developed more than a decade ago. Citibank also has placed a bet on a digital currency for on-line transactions, the invention of one of its own vice presidents, Sholom Rosen. The bank claims it will be more secure than competing alternatives like Cybercash Inc.'s Cybercoins, Digicash Inc.'s Ecash, and the Mondex smart-card-based system. Putting considerable prestige and intellectual firepower behind its cautionary principles, and behind the notion that the issuing of electronic currency should be reserved for regulated financial institutions, Citicorp has kept alive a debate that is likely to resound for months if not years in public policy circles, with effects not just on the battle for technical and competitive superiority but on the very consumer behavior Mr. Reed is trying to gauge. Consider some recent twists and turns: The U.S. government continues to struggle toward a policy on data encryption, the technology crucial to on-line transaction security, that would be agreeable to the high-tech community while addressing national security and law enforcement concerns. A May 1996 report by the National Research Council of the National Academy of Sciences -- Citicorp participated in and vocally endorsed the study -- criticized the government for being backward with its restrictions on encryption, particularly regarding its export. (See related article on page 14A.) Hewlett-Packard Co. in November announced its International Cryptography Framework, the first "strong encryption" method to get U.S. export clearance. While the framework is adaptable to various and changing government policies, it did not fully resolve the controversial issue of access to encryption keys. An information security team at the National Security Agency produced a monograph (excerpted at left) critical of the degree of anonymity built into Digicash's Ecash. The NSA, of course, is part of the establishment attacked in the National Research Council report. Digicash and Mondex, which is being taken over by MasterCard International, continually trade charges about their degrees of anonymity and security. Both sell anonymity of payments as a necessary analogue to cash. In that Digicash's anonymity appears more absolute, it may raise more governmental concerns. But Digicash, the brainchild of the renowned cryptologist David Chaum, accuses Mondex of not being "true electronic cash." First Virtual Holdings Inc., an Internet payment pioneer, does not trust Web security; its transaction data flow instead over private E-mail. By contrast, Cybercash Inc. chairman William Melton is so confident of the available technology that he tells bankers: "Security is essentially done. Just tell your customers, 'Don't worry, we'll take care of it.' " (He is more worried about privacy as a political flashpoint.) Enter the central banks of the Group of 10 industrialized countries, the constituents of the Bank for International Settlements in Basel, Switzerland. This august global regulatory body has signed off on a moderate, largely laissez-faire approach to the electronic evolution of money. A task force empaneled by the G-10's payment and settlement systems committee, which is headed by Federal Reserve Bank of New York president William McDonough, spelled out its conclusions in a 64-page booklet, "Security of Electronic Money," dated August 1996. The task force was generally impressed by existing security capabilities, particularly those incorporating hardware components like smart cards. The report took the eight-member task force less than a year to complete. Chairman Israel Sendrovic, the New York Fed's executive vice president of automation and systems services, asserts that this was no rush to judgment. He personally did due diligence on all of what he calls "the usual suspects" -- the electronic money schemes not mentioned by name in his report (but presumably in this article). In a recent interview, Mr. Sendrovic stressed that there are no absolutes. "There is no such thing as one secure measure," he said. "It's a combination of measures, and the combination of measures changes the risk management of an attack." His measured response to a lot of questions - pertaining to money laundering or the market potential of electronic currency and how it is to be regulated -- was, "It depends." He did say, in response to the recent flurry of questions about smart card security emanating from Bellcore and other research laboratories, that the cards were advertised as "tamper-resistant, not tamper- proof." Mr. Sendrovic said his panel has disbanded, satisfied with its work and having gotten positive feedback. "Then again, it didn't break new ground," he said. "Remember, it was designed not for the cognoscenti but for the Group of 10 governors. "We stay in close touch and follow these things," he said of the task force, adding that it may have cause to renew its inquiry in a year or two. Though the task force acknowledged "comprehensive security risk assessments of the entire system" are still lacking, it said they are within reach. And its words lacked the alarm or urgency of, say, the Citicorp contingent. Sholom Rosen, inventor of Citibank's Electronic Monetary System, characterized the risks as "very high" and not yet fully analyzed. Digital cash gains legitimacy when it is interchangeable with other forms of money, he said, but its interactions with those systems -- how an attack on one mechanism would affect others -- must be studied. And he said he believes the answers do not lie in technology alone but in the fundamentals of the "three pillars of security" -- prevention, detection, and containment. Where Mr. Rosen sees enormous hazard, Mr. Sendrovic retains faith in barriers to entry, as might be expected of someone who has worked with the dependable Fed Wire for many years. To be legitimate, electronic money "has to be cleared," he said. "At some point it has to get into the payment system." Is "the payment system" at risk of infection from the new forms of money? Based on what we know so far, it depends. ABA Banking Journal, 12/96 SMART CARDS POSE TAX PROBLEM FOR MERCHANTS A consensus is emerging that the success of smart cards hinges at least as much on merchants accepting them as on consumer acceptance. Increased tax liability is one reason for merchants' muted enthusiasm -- besides the fact that merchants are the only ones so far being asked to pay for using smart cards."There's a resistance to forms of payment besides cash," said Bruce Brittain, whose firm Brittain Associates, Inc., polled merchants that participated in the smart card test during the 1996 Summer Olympics in Atlanta. Some merchants admitted to understating their cash receipts so as to reduce their tax burden, he said. (Smart cards leave an electronic audit trail by recording deductions in card value each time merchandise is purchased.) On the flip side, franchisors may push for the adoption of smart cards in their stores, since some Atlanta operators told Brittain, "We want to collect more fees from our franchisees." (The franchisor's cut of the receipts will be reduced if the franchisee understates his receipts.) Other sources said they heard the same thing. The wish to under report receipts may pose a greater obstacle to smart cards when they undergo their next major test in New York City next year, because more "Mom and Pop" stores will be participating, Mr. Brittain said.

1 0

None One-time pads
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Tim May is just a poor excuse for an unschooled, retarded thug. /''' c-OO Tim May \ -

1 0

Hardening lists against spam attacks
by jamie＠comet.net 17 Dec '03

17 Dec '03

A stopgap measure.... Perhaps an X-header that changes weekly, monthly, whatever. Is there a way to configure the list software to reject a message that doesn't have the X-header? This won't stop all spam, but it'd put a damper on a bunch of it. A lot of spammers don't even know what an X-header is (though a lot do), much less how to put one in a message. Lists are one of the last havens from spam, and though spam seems to be the grafitti and billboards of the future, I don't feel particularly amenable to having to waste time hitting the "D" key. jamie ------------------------------------------------------------------------------ jamie(a)comet.net | Comet.Net | Send empty message | Charlottesville, Va. | to pgpkey(a)comet.net | (804)295-2407 | for pgp public key. | http://www.comet.net | "Information wants to be $1.98." -I dunno who said it. ------------------------------------------------------------------------------

6 9

benefits of EAR (not)?
by Adam Back 17 Dec '03

17 Dec '03

Reading through "http://jya.com/bxa123096.txt": > 1. This interim rule has been determined to be significant for > purposes of E.O. 12866. A cost benefit analysis has been prepared and > is available upon request by contacting James A. Lewis at (202) 482- > 0092. Anyone availed themselves of this offer of a CBA for EAR? Just curious as to what the supposed benefits are :-) Adam -- print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

4 3